$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbd3a3b4-bdba-3d5e-b1c6-e1ac3ba6caa4.roa File: fbd3a3b4-bdba-3d5e-b1c6-e1ac3ba6caa4.roa (raw, json) Hash identifier: Dg0lTqwYRQ5bWvHT17iJwn2/+Lf8pO6GvhcCdCZx7qU= Subject key identifier: E9:0A:13:82:62:CA:93:EB:B6:25:B7:B7:B9:95:57:3E:DE:01:83:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21E53ED82F1FFD3A9A480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbd3a3b4-bdba-3d5e-b1c6-e1ac3ba6caa4.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 396553 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1e:53:ed:82:f1:ff:d3:a9:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=bd6344c3-34e2-4f00-8880-34b18c9c2892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d7:f5:2e:d0:30:fb:d7:fb:ab:b6:39:c5:93: ad:66:ab:c3:b7:ea:95:22:34:85:63:52:cf:37:fd: ae:7f:2c:03:c4:e6:e3:4c:db:af:ad:d7:67:0e:c2: 52:7b:8d:88:57:07:eb:55:19:ae:ed:70:4e:65:fc: 78:1c:0b:44:e5:df:26:32:0f:a4:de:f3:ae:8c:8e: 70:c4:51:24:65:8f:98:5c:cc:c9:e4:7e:5c:54:89: 0c:59:94:2a:05:a9:01:a3:67:e7:9b:1f:b7:b8:9e: f6:e4:93:08:6a:f5:30:1f:f7:7c:90:52:5f:29:bf: d7:2c:1b:d6:e7:f3:ce:c8:36:14:8e:b2:f6:db:16: 64:80:93:65:ab:12:10:4f:12:ab:c6:0d:a8:fc:16: 91:53:da:9f:58:78:33:6f:da:6e:65:11:d2:ec:e6: d8:fd:18:10:ce:e6:79:88:f9:78:a7:54:e2:ad:f9: ed:65:ee:a9:d3:09:3a:f6:b6:ec:ea:5f:ee:47:1a: b5:66:cb:dc:74:f7:78:b0:ec:f5:d9:2f:bc:6d:42: bc:f4:ad:d0:82:e5:ee:d8:2c:bf:e8:3e:b9:8f:b3: 66:11:d4:c6:32:bd:e2:dd:3c:89:35:07:db:17:6b: 25:57:7a:10:47:02:bf:7a:a0:d8:24:55:2d:d1:8f: 59:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0A:13:82:62:CA:93:EB:B6:25:B7:B7:B9:95:57:3E:DE:01:83:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbd3a3b4-bdba-3d5e-b1c6-e1ac3ba6caa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:62:94:93:89:c6:d0:27:c5:20:be:2c:87:d0:9d:b9:24:8d: cb:5a:8a:e9:86:41:a3:54:b9:50:61:c2:3d:2f:58:79:e2:7a: db:51:16:1e:cb:59:11:d1:cc:80:02:32:eb:6c:6e:3d:73:07: 0f:e3:e7:c5:f9:a2:17:bb:7a:18:6e:d5:8e:fa:be:d1:06:46: ce:f9:c2:eb:c3:8b:48:8a:94:ad:a8:83:a6:c1:33:20:f1:37: dc:87:2d:2b:04:9d:1b:15:90:b2:08:bb:26:56:6d:8d:0e:0a: 4c:9c:54:09:f5:6e:b6:26:17:64:8c:3a:77:0c:01:dd:b6:2d: ca:29:26:ed:91:c3:01:a7:2d:72:f7:f7:9e:90:92:12:dd:9d: d8:57:8e:28:28:72:b5:74:d1:a2:8b:f4:6c:03:81:4d:c8:0c: fb:52:43:57:2f:5e:16:b1:fb:1b:8b:b8:64:09:66:e9:dd:f6: c5:69:dd:9b:48:fc:70:e4:ec:ab:d1:3f:51:60:6a:15:3d:17: 9a:8e:57:73:a6:ed:e7:67:69:67:a0:c5:18:25:d8:f6:c4:69: 8f:b1:d4:36:bd:41:f6:94:3a:04:4f:9a:8b:1a:70:1e:af:fd: 29:16:a2:9a:fb:be:2a:53:05:8f:bd:a5:37:30:3a:c0:4a:5d: 05:31:73:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh5T7YLx/9OppIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk YmQ2MzQ0YzMtMzRlMi00ZjAwLTg4ODAtMzRiMThjOWMyODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNf1LtAw+9f7q7Y5xZOtZqvDt+qVIjSFY1LP N/2ufywDxObjTNuvrddnDsJSe42IVwfrVRmu7XBOZfx4HAtE5d8mMg+k3vOujI5w xFEkZY+YXMzJ5H5cVIkMWZQqBakBo2fnmx+3uJ725JMIavUwH/d8kFJfKb/XLBvW 5/POyDYUjrL22xZkgJNlqxIQTxKrxg2o/BaRU9qfWHgzb9puZRHS7ObY/RgQzuZ5 iPl4p1TirfntZe6p0wk69rbs6l/uRxq1ZsvcdPd4sOz12S+8bUK89K3QguXu2Cy/ 6D65j7NmEdTGMr3i3TyJNQfbF2slV3oQRwK/eqDYJFUt0Y9ZJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOkKE4JiypPrtiW3t7mVVz7eAYNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmJkM2EzYjQtYmRiYS0z ZDVlLWIxYzYtZTFhYzNiYTZjYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAINilJOJxtAnxSC+LIfQnbkkjctaiumGQaNUuVBhwj0vWHniettR Fh7LWRHRzIACMutsbj1zBw/j58X5ohe7ehhu1Y76vtEGRs75wuvDi0iKlK2og6bB MyDxN9yHLSsEnRsVkLIIuyZWbY0OCkycVAn1brYmF2SMOncMAd22LcopJu2RwwGn LXL3956QkhLdndhXjigocrV00aKL9GwDgU3IDPtSQ1cvXhax+xuLuGQJZund9sVp 3ZtI/HDk7KvRP1FgahU9F5qOV3Om7ednaWegxRgl2PbEaY+x1Da9QfaUOgRPmosa cB6v/SkWopr7vipTBY+9pTcwOsBKXQUxc+U= -----END CERTIFICATE-----Generated at Mon Apr 28 08:53:26 2025 by rpki-client